> ## Documentation Index
> Fetch the complete documentation index at: https://docs.neuraltrust.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Hybrid network allowlist

> Hostnames and IPs your Hybrid cluster must allow for config-sync, DataBridge, and NeuralTrust inbound traffic.

Hybrid data planes open **outbound** connections to NeuralTrust for
configuration sync and DataBridge. Your firewall or security-group rules must
allow the destinations below from cluster worker nodes (and from any egress
NAT or proxy in front of them).

Prefer **hostname** rules when your firewall supports DNS-based allowlists.
The IPs below are for static ACLs. If DNS resolves differently in your region,
trust DNS and contact NeuralTrust support to refresh the IP list.

## Outbound (egress)

Allow **TCP 443** from your cluster egress to:

| Hostname                                 | IP              | Purpose                              |
| ---------------------------------------- | --------------- | ------------------------------------ |
| `agentgateway-configsync.neuraltrust.ai` | `34.22.134.169` | TrustGate (AgentGateway) config-sync |
| `trustguard-configsync.neuraltrust.ai`   | `34.62.69.111`  | TrustGuard config-sync               |
| `databridge.neuraltrust.ai`              | `34.62.63.231`  | DataAgent DataBridge                 |

Also allow outbound HTTPS to your container registry (or mirror), LLM
upstreams, and managed PostgreSQL / Redis. Product metadata OTLP uses a local
collector that forwards to the hosted telemetry endpoint — include that host
if your policy lists every external destination.

## Inbound (ingress)

Allow traffic **from** this NeuralTrust source IP into your cluster or edge
(typically to your published TrustGate LLM and MCP entry points):

| Source IP      |
| -------------- |
| `34.78.98.144` |

Config-sync and DataBridge are **outbound-only** from your cluster. You do not
open inbound ports for those services.

## Related

* [Deployment models](/neuraltrust/deployment/deployment-models#connectivity-checklist)
* [Overview → Network requirements](/neuraltrust/deployment/overview#network-requirements)
* [Console setup](/neuraltrust/deployment/console-setup)